netstat - what means ":::port" ?, difference with "0.0.0.0:port" ?, what is the correct config?, why color RED?

[000]

I have 2 servers with DIFFERENT output:


vs



who is the correct?
some is dangerous here?
please: what means "LISTEN" (in red) ??

with which command we can convert (maybe fixed)
":::*" to "0.0.0.0:port"

with which command we can convert (maybe fixed)
"0.0.0.0:port" to ":::*"


many thanks



some server is insecure ?

 

[cPRex]

Hey hey! The ":" represents IPv6 addresses.

 

[quietFinn]

The other one is IPv6 address, so they are the same.

> please: what means "LISTEN" (in red) ??
grep shows in red what you are searching for.

 

[000]

ah!, many thanks

then:

in SERVER A port 10000 is open to connect over IP6
in SERVER B port 10000 is open to connect over IP4

please:
which is the command to open xPORT to IP4 ?
which is the command to open xPORT to IP6 ?

we know that is possible from

• Home »
• Plugins »
• ConfigServer Security & Firewall

but how do from putty ?

 

[cPRex]

Section 4 here has CSF command line options: https://download.configserver.com/csf/readme.txt

 

[000]

Section 4 here has CSF command line options: https://download.configserver.com/csf/readme.txt

thanks, really we not understand but maybe not is section #4, for 2021 is section #10:

10. Advanced Allow/Deny Filters

 

[000]

master cPRex we open /etc/csf/csf.conf in both servers and none have the string "10000", both servers/files only have this line:



then I not find how:

convert
":::*" to "0.0.0.0:port"

convert
"0.0.0.0:port" to ":::*"

please help to interchange

 

[cPRex]

I'm not sure how the firewall configuration is related to the question. The one server you tested just likely has the IPv6 address show up first when checking "ifconfig" which is why netstat checked that first.

 

[quietFinn]

"0.0.0.0:port" means that it's listening in port "port" in all IPv4 addresses in the server,
":::port" means that it's listening in port "port" in all IPv6 addresses in the server.

 

[000]

"0.0.0.0:port" means that it's listening in port "port" in all IPv4 addresses in the server,
":::port" means that it's listening in port "port" in all IPv6 addresses in the server.

thanks master

when we open /etc/csf/csf.conf (in both: serverA and serverB) not exist string "10000"
then logically the config of this port not is doit from /etc/csf/csf.conf

please: how we can

convert
":::*" to "0.0.0.0:port"

convert
"0.0.0.0:port" to ":::*"

???

 

[quietFinn]

thanks master

when we open /etc/csf/csf.conf (in both: serverA and serverB) not exist string "10000"
then logically the config of this port not is doit from /etc/csf/csf.conf

You must open the port in TCP_IN & TCP6_IN.

please: how we can

convert
":::*" to "0.0.0.0:port"

convert
"0.0.0.0:port" to ":::*"

???

That is configured in that service's configuration. Usually a service is listening in both IPv4 and IPv6 addresses (if IPv6 in enabled in the server).

 

[000]

You must open the port in TCP_IN & TCP6_IN.


That is configured in that service's configuration. Usually a service is listening in both IPv4 and IPv6 addresses (if IPv6 in enabled in the server).

thanks.

can please sayme:

how ADD "hear over IP4" in server B
and
how ADD "hear over IP6" in server A



you can see, both servers not have string 10000 into file: /etc/csf/csf.conf



however server A load port 10000 in IP6 and server B load port 10000 in IP4

regards

 

[000]

both files/servers have IDENTIC content:



not "range FROM... UNTIL..."
however:

port 10000 in SERVER A listen over IP4
port 10000 in SERVER B listen over IP6

how open over one or other IP?
how interchange?
how closed?

also both files/servers have:



thanks

 

[cPRex]

I'm still not sure where the "10000" is coming from - can you let me know where you're seeing the number 10000 and where you are expecting that to be?